CVE-2026-45612 rizinorg CVE debrief

Who should care

Developers and users of the rz-libdemangle Rizin library should be aware of this vulnerability and take necessary actions to update to the fixed version. The vulnerability can lead to potential crashes or information disclosure. The issue has a CVSS score of 5.5 and is classified as MEDIUM severity.

Technical summary

The rz-libdemangle library, used for demangling symbols in Rizin, has a vulnerability in its Rust demangler. Prior to commit 6bf56d3, an out-of-bounds read can occur when the demangler structure is not yet initialized. This issue has a CVSS score of 5.5 and is classified as MEDIUM severity. The vulnerability can lead to potential crashes or information disclosure. Developers and users of the rz-libdemangle Rizin library should be aware of this vulnerability and take necessary actions to update to the fixed version.

Defensive priority

Medium priority should be given to updating the rz-libdemangle library to the fixed version, as the vulnerability can lead to potential crashes or information disclosure.

Recommended defensive actions

• Update the rz-libdemangle library to the latest version containing commit 6bf56d3.
• Review and monitor the library's usage in your projects.
• Consider implementing additional security measures to prevent potential exploitation.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record was published on 2026-07-16T17:16:56.687Z and last modified on 2026-07-16T19:16:45.433Z. The NVD entry is currently Deferred. The rz-libdemangle library, used for demangling symbols in Rizin, has a vulnerability in its Rust demangler. Prior to commit 6bf56d3, an out-of-bounds read can occur when the demangler structure is not yet initialized. This issue has a CVSS score of 5.5 and is classified as MEDIUM severity. Developers and users of the rz-libdemangle Rizin library should be aware of this vulnerability and take necessary actions to update to the fixed version.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.